Privacy policy

(Last updated: 2025-10-11)

This Privacy Policy explains how MB “Advandaed” (company code 306450103, address: Žirgų g. 18-6, 14257 Raudondvaris, Lithuania; email: support@advstore.lt processes your personal data and how we use cookies on the website advstore.lt (hereinafter – the Website).

1. Data controller and contact details

The data controller is MB “Advandaed”. For data protection matters, please contact us at: support@advstore.lt. In this document, "we" and "our" refer to MB "Advandaed”"

2. What data we collect and why

2.1. Website usage

What data: IP address, device and browser information, pages viewed, events (e.g. clicks, scrolling), log records, cookies and similar technologies.

Purposes: operation and security of the Website, performance analysis, improvement of content and user experience, fraud prevention. Legal basis: legitimate interest (GDPR Article 6(1)(f)); strictly necessary cookies are used for the operation of the Website.

2.2. Account, orders and payments

What data: first name, last name, email address, phone number, addresses, ordered products, delivery details, payment metadata (payment service provider), communication history with customer support.

Purposes: conclusion and performance of the contract (order processing, delivery, returns), customer support, compliance with legal obligations (accounting and taxation).

Legal basis: contract (GDPR Article 6(1)(b)); legal obligation (GDPR Article 6(1)(c)).

2.3. Enquiries and communication

What data: contact details provided by you and the content of your message when you contact us via a form or by email.
Purpose: to respond to enquiries and provide support.
Legal basis: legitimate interest (GDPR Article 6(1)(f)).

2.4. Marketing (email newsletters)

What data: email address, consent status, interaction with emails (opens, clicks), subscription management data. Purposes: sending newsletters and offers; where consent is given – personalising content. Legal basis: consent (GDPR Article 6(1)(a)); for existing customers – legitimate interest (GDPR Article 6(1)(f)) with a simple right to opt out. How to unsubscribe: click "Unsubscribe" at the bottom of any email.

3. Recipients and data processors

We may transfer your data to trusted service providers acting on our behalf and according to our instructions (data processors). We remain responsible for their actions.

Main recipients include:

  • Shopify – e-commerce platform and hosting (operation of the Website).
  • Klaviyo – email marketing and onsite forms (newsletters, pop-up forms).
  • Payment service providers – e.g. Stripe, PayPal (payment processing).
  • Couriers and logistics partners – delivery of goods.
  • Analytics and advertising partners – e.g. Google Analytics/Ads, Meta Pixel (audience measurement and advertising personalisation). Data may also be disclosed to public authorities where required by law.

4. International data transfers

Some service providers’ servers may be located outside the European Economic Area (EEA), for example in the United States. Such transfers are carried out on the basis of the EU–US Data Privacy Framework (DPF) and/or Standard Contractual Clauses (SCCs), together with additional technical and organisational safeguards.

5. Data retention periods

  • Order and accounting records: 10 years (in accordance with Lithuanian law).
  • Customer service enquiries: up to 24 months.
  • Marketing data: until consent is withdrawn or after a prolonged period of inactivity.
  • Cookies and similar technologies: according to their individual retention periods (see Section 6).
    Where necessary (e.g. for dispute resolution), retention periods may be extended.

6. Cookies and similar technologies

What are cookies?
Cookies are small files stored in your browser that help the Website function, remember your settings and enable analytics; they are also used for marketing purposes with your consent.

Categories of cookies we use:

  • Necessary – required for the operation and security of the Website (cannot be disabled).
  • Analytical – for statistics and Website improvement.
  • Marketing – for advertising and personalisation (including pixels and SDKs).

Main providers and example cookies:

  • Shopify – necessary and functional cookies (cart, localisation, security).
    Examples: _shopify_y, _shopify_s, cart, secure_customer_sig, checkout_token, localization.
    Retention: session-based or up to 24 months.
  • Google Analytics / Google Ads – analytical and marketing cookies (statistics, advertising performance).
    Examples: _ga, _gid, ga, gac, _gcl_au.
    Retention: up to 24 months.
  • Meta Pixel (Facebook) – marketing cookies (audience creation, advertising personalisation).
    Example: _fbp.
    Retention: up to 3 months.
  • Klaviyo (onsite & email) – marketing and onsite functionality (pop-up forms, subscription status tracking).
    Examples: __kla_id, KL_FORMS_MODAL.
    Retention: up to 24 months.

Consent and management.
Non-essential cookies (analytical and marketing) are set only after you provide consent via the cookie banner. You can change your preferences at any time using the “Cookie settings” link in the Website footer. Until consent is given, analytical and marketing tools are not loaded (Consent Mode is applied).

7. Your rights

Under the GDPR, you have the right to:

  • access your personal data;
  • request correction of inaccurate data;
  • request erasure of data (“right to be forgotten”), where applicable;
  • restrict processing;
  • object to processing based on legitimate interest, including profiling;
  • receive your data in a structured, commonly used and machine-readable format and/or transfer it to another controller (data portability);
  • withdraw consent at any time (without affecting processing carried out before withdrawal).

To exercise your rights, contact: support@advstore.lt.

You may also contact the State Consumer Rights ProtectionAuthority (Lithuania): https://vvtat.lt,  or seek online dispute resolution through the European Union consumer redress platform: https://consumer-redress.ec.europa.eu/index_en

Our services are not intended for persons under the age of 16, and we do not knowingly collect children’s data. If we become aware of such data, we will delete it or request consent from parents or legal guardians.

9. Changes to this policy

We may update this policy from time to time. The latest version is always published on this page. Significant changes will be communicated on the Website and/or by email.